Struct JwtConfig 

#[non_exhaustive]
pub struct JwtConfig {
    pub jwks_uri: Option<String>,
    pub jwks_max_age_secs: u64,
    pub issuer: Option<String>,
    pub audience: Option<String>,
    pub public_key_pem_file: Option<PathBuf>,
    pub claims_headers: HashMap<String, String>,
    pub roles_claim: String,
    pub cache: JwtCacheConfig,
}

JWT validation config.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

jwks_uri: Option<String>

JWKS URI for key discovery.

jwks_max_age_secs: u64

Age in seconds after which the JWKS keys are fetched again, so a key the provider removed stops verifying tokens. At least 60, the minimum spacing of refreshes. Default: 300.

issuer: Option<String>

Expected issuer.

audience: Option<String>

Expected audience.

public_key_pem_file: Option<PathBuf>

Path to Ed25519 public key PEM file (alternative to JWKS URI).

claims_headers: HashMap<String, String>

Claims → HTTP headers mapping.

roles_claim: String

Claim holding the user’s roles (array of strings). Supports a dotted path for nested claims, e.g. “realm_access.roles”. Default: “roles”.

cache: JwtCacheConfig

Cache of verified tokens for the built-in verifier, so a client that sends the same token on every request pays for one signature check.

Trait Implementations

impl Clone for JwtConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for JwtConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.